Awesome Use of SQL Injection

[bigguy]

 

Awesome Use of SQL Injection


I don't know whether or not it worked, but it's an interesting idea.

[Serk]

Oh man I hope that worked! And I love the fake license itself too, ZU 0666... Zuo 666, Zuo is Chinese for "To Live"... so translation would be something like "Living Evil" or "Live Satan" or some such...

Brilliant...

[Gryphon Rider]

For those of us who don't understand SQL injection, please explain this.

[Serk]

For those of us who don't understand SQL injection, please explain this.

Speed cameras take a picture of your license plate, use optical character recognition (OCR) to translate the image into text, and put your license plate into a database.

Instead of just a license plate, he's constructed a SQL command (Database control language) to wipe out the database.

So, if this works, if his car was tagged by a speed camera for speeding, instead of getting a ticket, the entire database the speed camera company was using would get wiped out.

[Jess from VA]

Resist the Borg.

[Brewer]

SQL = Structured Query Language.
If the system was vulnerable to the injection attack and the table name was correct.... seems like someone might have inside knowledge or this could have been a test scenario document picture.